You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
37 lines
1.7 KiB
37 lines
1.7 KiB
This module sets the Type of Service field in the IPv4 header (including the
|
|
"precedence" bits) or the Priority field in the IPv6 header. Note that TOS
|
|
shares the same bits as DSCP and ECN. The TOS target is only valid in the
|
|
\fBmangle\fP table.
|
|
.TP
|
|
\fB\-\-set\-tos\fP \fIvalue\fP[\fB/\fP\fImask\fP]
|
|
Zeroes out the bits given by \fImask\fP (see NOTE below) and XORs \fIvalue\fP
|
|
into the TOS/Priority field. If \fImask\fP is omitted, 0xFF is assumed.
|
|
.TP
|
|
\fB\-\-set\-tos\fP \fIsymbol\fP
|
|
You can specify a symbolic name when using the TOS target for IPv4. It implies
|
|
a mask of 0xFF (see NOTE below). The list of recognized TOS names can be
|
|
obtained by calling iptables with \fB\-j TOS \-h\fP.
|
|
.PP
|
|
The following mnemonics are available:
|
|
.TP
|
|
\fB\-\-and\-tos\fP \fIbits\fP
|
|
Binary AND the TOS value with \fIbits\fP. (Mnemonic for \fB\-\-set\-tos
|
|
0/\fP\fIinvbits\fP, where \fIinvbits\fP is the binary negation of \fIbits\fP.
|
|
See NOTE below.)
|
|
.TP
|
|
\fB\-\-or\-tos\fP \fIbits\fP
|
|
Binary OR the TOS value with \fIbits\fP. (Mnemonic for \fB\-\-set\-tos\fP
|
|
\fIbits\fP\fB/\fP\fIbits\fP. See NOTE below.)
|
|
.TP
|
|
\fB\-\-xor\-tos\fP \fIbits\fP
|
|
Binary XOR the TOS value with \fIbits\fP. (Mnemonic for \fB\-\-set\-tos\fP
|
|
\fIbits\fP\fB/0\fP. See NOTE below.)
|
|
.PP
|
|
NOTE: In Linux kernels up to and including 2.6.38, with the exception of
|
|
longterm releases 2.6.32 (>=.42), 2.6.33 (>=.15), and 2.6.35 (>=.14), there is
|
|
a bug whereby IPv6 TOS mangling does not behave as documented and differs from
|
|
the IPv4 version. The TOS mask indicates the bits one wants to zero out, so it
|
|
needs to be inverted before applying it to the original TOS field. However, the
|
|
aformentioned kernels forgo the inversion which breaks \-\-set\-tos and its
|
|
mnemonics.
|